Creating and Applying a Switching Profile to an Interface

You can assign VLANVirtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. membership to the interface using the switching profile. The switching profile has the following types of configurations for a port:

Switch-Port Mode—Specifies whether the port is an access port connected to an end device or a trunk port for uplink connectivity.
Access VLAN—Specifies the VLAN ID for the port, when the switch-port mode is access.
Native VLAN—Specifies the VLAN for incoming untagged packets, when the switch-port mode is trunk. When a packet goes out of a trunk interface in native VLAN, it will be untagged. By default, VLAN 1 is the native VLAN. The native VLAN should be part of the trunk allowed VLANs.
Trunk Allowed VLANs—Identifies the VLAN IDs for which the trunk carries the traffic.

Using the WebUI

1. Navigate to the Configuration > Ports > Switching tab.
2. Under the profiles list, click New.
3. Enter a name for the new switching profile under the Name column.
4. Select a mode from the drop-down list. It can be either trunk or access.
5. If you selected the mode as access, select the Access VLAN from the drop-down list. Only the VLANs created already are listed.
6. If you selected the mode as trunk, select the Native VLAN from the drop-down list. Only the VLANs created already are listed.
7. If you selected the mode as Trunk, select the trunk allowed VLANs from the Allowed VLAN column.
8. Select the interfaces that are part of this VLAN in the Association column.
9. Click Apply and Save Configuration.

Using the CLI

(host)(config)# interface-profile switching-profile <profile-name>

access-vlan <VLAN-ID>

clone <source>

native-vlan <VLAN-ID>

switchport-mode {access|trunk}

trunk allowed vlan [add|all|except|remove] <VLANs-List>

storm-control-bandwidth <1-100>




no {...}


(host)(config)# interface gigabitethernet <slot/module/port>

switching-profile <profile-name>


If you do not specify a switch-port mode, the port will be in switch-port mode access implicitly. In the case of switchport-mode trunk, the native vlan has to be in the allowed vlan list if you want the port to receive and transmit on the native vlan.

Default Switching Profile

(host)# show interface-profile switching-profile default

switching profile "default"


Parameter Value

--------- -----

Switchport mode access

Access mode VLAN 1

Trunk mode native VLAN 1

Enable broadcast traffic rate limiting Enabled

Enable multicast traffic rate limiting Disabled

Enable unknown unicast traffic rate limiting Enabled

Max allowed rate limit traffic on port in percentage 50

Trunk mode allowed VLANs 1-4094

Sample Access Port Configuration

You can use the following steps to configure an interface as an access port that belongs to a particular VLAN:

1. Create a switching profile.
2. Apply the switching profile to the interface.

To configure a switching profile with access VLAN 200, use the following commands:

interface-profile switching-profile Student

access-vlan 200

To apply the switching-profile to the interface (gigabitethernet 0/0/10), use the following commands:

interface gigabitethernet 0/0/10

switching-profile Student


Verifying the Switching Profile Configuration for the Interface

To verify the configuration, use one of the following commands:

(host) #show vlan



VLAN Description Ports

---- ----------- ------------------------------------

1 VLAN0001 GE 0/0/0 GE 0/0/1 GE 0/0/11 GE 0/0/12

GE 0/0/13 GE 0/0/14 GE 0/0/15 GE 0/0/16

GE 0/0/17 GE 0/0/18 GE 0/0/19 GE 0/0/2

100 Faculty

200 Student GE 0/0/10


(host) #show interface gigabitethernet 0/0/0 switchport extensive


Link is Up

Flags: Access, Trusted


VLAN membership:


VLAN tag Tagness STPSpanning Tree Protocol. STP is a network protocol that builds a logical loop-free topology for Ethernet networks.-State

-------- -------- ---------

1 Untagged FWD

Sample Trunk Port Configuration

To configure a trunk port, the switch-port mode should be set as trunk. To define the switching profile, use the following commands:

interface-profile switching-profile Upstream

switchport-mode trunk

To apply the switching profile to the trunk ports, use the following commands:

interface gigabitethernet 0/0/11

switching-profile Upstream

For trunk ports, there are times when the other side of the link requires traffic to be sent without any tags. This functionality is commonly referred as native VLAN. For this purpose, you can use the native-vlan parameter in the switching-profile:

interface-profile switching-profile Upstream

native-vlan 100

By default, a trunk port allows all VLANs to be transported. You can change the allowed VLANs using the trunk allowed vlan parameter in the switching profile:

interface-profile switching-profile Upstream

trunk allowed vlan all

Verifying the Trunk Configuration

You can use the following command to view the trunk configuration:

(host)# show trunk

Trunk Port Table


Port Vlans Allowed Vlans Active Native Vlan

---- ------------- ------------ -----------

GE 0/0/11 ALL 1,100,200 100

GE 0/0/12 2-45 2,30 45